$ rpki-client -vvf repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa File: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (raw, json) Hash identifier: bOMw2z/DqljmPFskG2vsYIuUCGDr+Iq+bzXjTNV2cFE= Subject key identifier: D6:E1:E1:59:D2:4C:15:D4:63:B4:07:92:CA:E9:EB:CF:DD:28:E7:B8 Certificate issuer: /CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Certificate serial: 0A57468344DA4EDA99C369EF4B76DC7DB71A81AC Authority key identifier: DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa Signing time: Thu 19 Feb 2026 17:00:01 +0000 ROA not before: Thu 19 Feb 2026 16:55:01 +0000 ROA not after: Thu 18 Feb 2027 17:00:01 +0000 asID: 150971 IP address blocks: 103.127.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:57:46:83:44:da:4e:da:99:c3:69:ef:4b:76:dc:7d:b7:1a:81:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Validity Not Before: Feb 19 16:55:01 2026 GMT Not After : Feb 18 17:00:01 2027 GMT Subject: CN=D6E1E159D24C15D463B40792CAE9EBCFDD28E7B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f2:40:15:fe:00:72:83:88:cb:6d:dc:e0:6d: 82:08:d3:92:53:c6:53:69:3f:3f:be:4f:81:22:36: 69:35:40:55:f5:92:f5:50:3c:f9:54:52:70:fb:b3: 9f:4b:87:a8:ac:79:1a:25:83:83:ca:8b:42:20:34: cd:18:4f:25:9b:8c:89:5a:53:4c:75:13:42:33:f2: 82:49:48:81:72:ec:d1:ec:74:9a:69:fe:da:3c:e9: d0:72:c5:76:1b:0b:7a:3d:0c:e7:6c:31:0c:b6:88: 45:e4:b3:e0:b6:87:c7:6e:e8:cc:58:92:ec:d8:e4: 55:34:98:25:fb:99:13:cd:d5:82:54:42:42:ab:70: 3b:da:34:16:06:88:de:26:0f:26:76:22:bf:31:55: 20:51:da:da:9f:c6:20:57:d6:9a:9c:dd:95:6a:36: 79:86:f8:f3:00:1c:74:e9:6d:b8:f6:6d:43:c5:b8: ad:44:64:6f:14:d9:48:83:61:2c:ce:cc:02:a1:35: 41:5c:1f:34:ae:0f:6c:a6:49:9a:49:2d:ec:4b:bf: ef:92:fc:ab:bc:e7:95:3d:a1:a5:8f:da:84:83:47: ac:ea:4e:73:cd:a0:12:18:1c:8d:34:43:ed:ce:e3: 10:d9:f8:f8:9b:f7:9f:6f:52:a7:bd:2c:ed:df:06: ea:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E1:E1:59:D2:4C:15:D4:63:B4:07:92:CA:E9:EB:CF:DD:28:E7:B8 X509v3 Authority Key Identifier: keyid:DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.127.106.0/23 Signature Algorithm: sha256WithRSAEncryption a1:48:09:6f:36:76:23:f2:f7:44:1d:92:87:ab:22:b0:c8:43: e5:ec:d5:e3:57:64:d1:20:e4:57:8b:4a:f7:bf:97:6b:8c:f3: 83:86:9e:71:f6:c8:9b:98:2e:9a:3c:30:20:42:5a:a3:07:15: 97:5e:39:5f:5e:f1:1e:a7:4a:aa:44:af:41:1d:03:01:c8:b7: 4b:2d:4b:ae:ae:59:6b:f9:bf:9a:ee:e7:9c:fb:1b:14:c5:25: cd:ee:ae:65:a8:c8:1c:19:7a:6f:f7:ed:35:67:e2:b2:79:79: bb:fd:d9:e6:21:49:5a:a5:9c:4d:14:12:56:94:cf:03:b8:14: 86:4d:f0:1e:f6:dd:96:d2:8b:2c:50:db:fe:b5:c2:2e:d0:7e: 2a:0e:38:99:ed:de:bf:32:28:f4:4b:55:66:c8:e6:d9:f8:32: b4:08:51:7f:08:9d:50:8b:17:fc:85:fa:00:1f:db:f7:6d:9e: f1:fa:09:58:f2:4d:21:7e:96:e5:fc:3f:be:e6:86:34:32:cf: a0:b6:e2:0d:1d:25:ad:31:e8:78:44:20:f3:b1:60:58:1e:35: b8:7a:36:64:6c:31:de:b7:a1:09:9a:db:91:d9:58:4a:05:c2: 10:9b:de:6e:2a:30:33:70:46:94:9c:f3:f4:12:38:ef:d6:99: da:e6:17:d3 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUCldGg0TaTtqZw2nvS3bcfbcagawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZE NjIyRkIyRTAeFw0yNjAyMTkxNjU1MDFaFw0yNzAyMTgxNzAwMDFaMDMxMTAvBgNV BAMTKEQ2RTFFMTU5RDI0QzE1RDQ2M0I0MDc5MkNBRTlFQkNGREQyOEU3QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8kAV/gByg4jLbdzgbYII05JT xlNpPz++T4EiNmk1QFX1kvVQPPlUUnD7s59Lh6iseRolg4PKi0IgNM0YTyWbjIla U0x1E0Iz8oJJSIFy7NHsdJpp/to86dByxXYbC3o9DOdsMQy2iEXks+C2h8du6MxY kuzY5FU0mCX7mRPN1YJUQkKrcDvaNBYGiN4mDyZ2Ir8xVSBR2tqfxiBX1pqc3ZVq NnmG+PMAHHTpbbj2bUPFuK1EZG8U2UiDYSzOzAKhNUFcHzSuD2ymSZpJLexLv++S /Ku855U9oaWP2oSDR6zqTnPNoBIYHI00Q+3O4xDZ+Pib959vUqe9LO3fBuqfAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU1uHhWdJMFdRjtAeSyunrz90o57gwHwYDVR0j BBgwFoAU3wrG7a785P7R7opMCnvE79Yi+y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGQ3YTAzOC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC9ERjBBQzZFREFF RkNFNEZFRDFFRThBNEMwQTdCQzRFRkQ2MjJGQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZENjIy RkIyRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4ZDdhMDM4LWY4YTEtNGVkMC1h MWFmLTU0OTUyZTU0M2M0My8wLzMxMzAzMzJlMzEzMjM3MmUzMTMwMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM1MzAzOTM3MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnf2owDQYJ KoZIhvcNAQELBQADggEBAKFICW82diPy90QdkoerIrDIQ+Xs1eNXZNEg5FeLSve/ l2uM84OGnnH2yJuYLpo8MCBCWqMHFZdeOV9e8R6nSqpEr0EdAwHIt0stS66uWWv5 v5ru55z7GxTFJc3urmWoyBwZem/37TVn4rJ5ebv92eYhSVqlnE0UElaUzwO4FIZN 8B723ZbSiyxQ2/61wi7QfioOOJnt3r8yKPRLVWbI5tn4MrQIUX8InVCLF/yF+gAf 2/dtnvH6CVjyTSF+luX8P77mhjQyz6C24g0dJa0x6HhEIPOxYFgeNbh6NmRsMd63 oQma25HZWEoFwhCb3m4qMDNwRpSc8/QSOO/WmdrmF9M= -----END CERTIFICATE-----Generated at Mon Mar 2 19:30:16 2026 by rpki-client